This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft File: xTLcpO-wjHGnrwa-wCHIhxMNR48.mft (raw, json) Hash identifier: tHZ2lgR7RQzjB5mgDg4qiYECW783U2+EENHZNi/PJ0Q= Subject key identifier: 29:80:11:73:40:08:A2:4A:35:9E:9E:1B:04:34:F2:63:53:59:C6:93 Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f Certificate serial: 019C41D8BAC889A8F47BFAE8BFB8EE5BBA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft Manifest number: 4A Signing time: Mon 09 Feb 2026 10:00:48 +0000 Manifest this update: Mon 09 Feb 2026 10:00:48 +0000 Manifest next update: Tue 10 Feb 2026 10:00:48 +0000 Files and hashes: 1: Zx6dAYv6xU2d0eLmMmcp1Qk4Wak.roa (hash: y4KgyMp2UDvfj9161jYNu9mn66Bt+yBpZ2QFn7q4fIY=) 2: xTLcpO-wjHGnrwa-wCHIhxMNR48.crl (hash: A79M2BUlv9B9mvZllX5OkGiHrEYS6WeJYAN5a0zZopM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ba:c8:89:a8:f4:7b:fa:e8:bf:b8:ee:5b:ba:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f Validity Not Before: Feb 9 10:00:48 2026 GMT Not After : Feb 10 10:00:48 2026 GMT Subject: CN=298011734008a24a359e9e1b0434f2635359c693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:1e:0e:fa:d8:23:5c:06:1e:14:3d:5c:84: 63:70:75:7f:32:b1:45:07:f0:82:e7:62:de:48:62: f0:e5:d2:d0:c1:7f:f5:c1:bd:c4:c8:d0:80:70:23: d4:90:a9:16:54:08:1c:11:8b:15:26:82:b7:64:03: e7:c6:81:db:06:45:d6:0b:db:c8:90:a1:dc:c3:8d: d0:2f:71:d5:cd:4e:61:32:db:63:99:f4:42:f9:97: 0d:cb:8e:23:d1:29:66:4e:b2:54:0d:aa:e9:41:83: cb:1c:ff:cb:41:9b:67:c9:be:e9:01:80:da:3c:7c: 16:37:54:a3:b4:9f:cd:dc:10:c3:83:24:05:5a:af: e0:ac:38:3e:f0:1a:e6:7d:21:1e:be:34:32:48:0d: b7:08:da:30:73:7d:f6:68:cb:6c:65:de:52:4a:c1: 6e:85:5d:2a:74:f4:e6:cd:f9:7d:d4:ea:dc:d0:e1: 19:f0:d3:69:6b:ca:1a:6a:a1:90:d0:ba:41:c0:14: 9e:1d:25:9a:54:65:3f:51:62:92:f3:31:c5:66:73: ec:cb:54:e9:50:dd:a4:4c:4a:2c:b5:55:e0:1e:e0: 31:db:02:79:5d:0a:5a:1d:6b:c1:e8:b5:53:e6:d3: 27:61:24:96:9d:d9:82:8c:28:6e:3b:28:02:29:82: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:80:11:73:40:08:A2:4A:35:9E:9E:1B:04:34:F2:63:53:59:C6:93 X509v3 Authority Key Identifier: keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:48:ce:21:0e:40:33:02:31:84:d5:d6:01:74:08:d9:aa:01: 20:6b:5e:a4:f9:8a:30:b2:3b:1c:fe:64:ad:57:99:cc:73:98: 49:b5:31:72:27:42:83:9e:c5:64:e0:a3:3a:3f:bd:82:a6:c2: 63:9b:90:17:d7:03:32:7e:40:e6:dd:82:a5:39:47:f5:95:41: 31:2b:46:6c:eb:56:40:1f:5e:aa:ab:54:27:dc:3b:f3:ec:98: 3b:6e:0f:58:1d:6d:46:16:af:1c:cb:3a:d5:a3:28:3c:fb:45: f3:b8:2a:e2:bb:ef:e4:8e:32:5b:39:19:cf:75:40:62:a2:0a: 76:d5:10:b1:3f:42:df:6d:e1:4e:38:32:46:2d:9c:d2:93:37: 2d:4d:72:db:b3:e1:44:71:8a:2a:54:a5:14:35:6c:dd:7e:b5: d9:65:24:88:29:2d:77:40:a0:93:f7:e4:ea:49:7f:1e:7c:56: 06:2f:cb:f1:63:99:85:3f:8b:0f:23:15:fb:93:db:2c:a4:af: 22:a8:c3:bc:83:b1:4c:47:73:f3:55:fb:94:8c:f1:f5:7f:9c: 5c:f9:1e:1f:77:7c:d2:40:c7:94:28:7c:57:0b:8a:57:ef:e8: 2b:fd:40:fe:77:a6:24:5d:59:83:42:ad:f9:7e:3d:c3:56:7f: ab:57:69:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LrIiaj0e/rov7juW7qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzJkY2E0ZWZiMDhjNzFhN2FmMDZiZWMwMjFjODg3MTMw ZDQ3OGYwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD EygyOTgwMTE3MzQwMDhhMjRhMzU5ZTllMWIwNDM0ZjI2MzUzNTljNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm4eDvrYI1wGHhQ9XIRjcHV/MrFF B/CC52LeSGLw5dLQwX/1wb3EyNCAcCPUkKkWVAgcEYsVJoK3ZAPnxoHbBkXWC9vI kKHcw43QL3HVzU5hMttjmfRC+ZcNy44j0SlmTrJUDarpQYPLHP/LQZtnyb7pAYDa PHwWN1SjtJ/N3BDDgyQFWq/grDg+8BrmfSEevjQySA23CNowc332aMtsZd5SSsFu hV0qdPTmzfl91Orc0OEZ8NNpa8oaaqGQ0LpBwBSeHSWaVGU/UWKS8zHFZnPsy1Tp UN2kTEostVXgHuAx2wJ5XQpaHWvB6LVT5tMnYSSWndmCjChuOygCKYJvtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmAEXNACKJKNZ6eGwQ08mNTWcaTMB8GA1UdIwQY MBaAFMUy3KTvsIxxp68GvsAhyIcTDUePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRMY3BPLXdqSEducndhLXdDSEloeE1OUjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NzdiMjItYTgxZi00YmNmLWJjNzUt YzkyYTkwYzEyMWU4LzEveFRMY3BPLXdqSEducndhLXdDSEloeE1OUjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81NzdiMjItYTgxZi00YmNmLWJjNzUtYzkyYTkwYzEyMWU4 LzEveFRMY3BPLXdqSEducndhLXdDSEloeE1OUjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUjOIQ5A MwIxhNXWAXQI2aoBIGtepPmKMLI7HP5krVeZzHOYSbUxcidCg57FZOCjOj+9gqbC Y5uQF9cDMn5A5t2CpTlH9ZVBMStGbOtWQB9eqqtUJ9w78+yYO24PWB1tRhavHMs6 1aMoPPtF87gq4rvv5I4yWzkZz3VAYqIKdtUQsT9C323hTjgyRi2c0pM3LU1y27Ph RHGKKlSlFDVs3X612WUkiCktd0Cgk/fk6kl/HnxWBi/L8WOZhT+LDyMV+5PbLKSv IqjDvIOxTEdz81X7lIzx9X+cXPkeH3d80kDHlCh8VwuKV+/oK/1A/nemJF1Zg0Kt +X49w1Z/q1dpfA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:10 2026 by rpki-client